ci: shard channel codeql quality · openclaw/openclaw@bb0461b
vincentkoc
·
2026-04-29
·
via Recent Commits to openclaw:main
| Original file line number | Diff line number | Diff line change |
|---|
|
| 1 | +name: openclaw-codeql-channel-runtime-boundary-critical-quality |
| 2 | + |
| 3 | +disable-default-queries: true |
| 4 | + |
| 5 | +queries: |
| 6 | + - uses: security-and-quality |
| 7 | + |
| 8 | +query-filters: |
| 9 | + - include: |
| 10 | +problem.severity: |
| 11 | + - error |
| 12 | + - exclude: |
| 13 | +tags: |
| 14 | + - security |
| 15 | + |
| 16 | +paths: |
| 17 | + - src/channels |
| 18 | + |
| 19 | +paths-ignore: |
| 20 | + - "**/node_modules" |
| 21 | + - "**/coverage" |
| 22 | + - "**/*.generated.ts" |
| 23 | + - "**/*.bundle.js" |
| 24 | + - "**/*-runtime.js" |
| 25 | + - "**/*.test.ts" |
| 26 | + - "**/*.test.tsx" |
| 27 | + - "**/*.e2e.test.ts" |
| 28 | + - "**/*.e2e.test.tsx" |
| 29 | + - "**/*test-support*" |
| 30 | + - "**/*test-helper*" |
| 31 | + - "**/*mock*" |
| 32 | + - "**/*fixture*" |
| 33 | + - "**/*bench*" |
| Original file line number | Diff line number | Diff line change |
|---|
@@ -81,6 +81,27 @@ jobs:
|
81 | 81 | with: |
82 | 82 | category: "/codeql-critical-quality/gateway-runtime-boundary" |
83 | 83 | |
| 84 | +channel-runtime-boundary: |
| 85 | +name: Critical Quality (channel-runtime-boundary) |
| 86 | +runs-on: blacksmith-8vcpu-ubuntu-2404 |
| 87 | +timeout-minutes: 25 |
| 88 | +steps: |
| 89 | + - name: Checkout |
| 90 | +uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 |
| 91 | +with: |
| 92 | +submodules: false |
| 93 | + |
| 94 | + - name: Initialize CodeQL |
| 95 | +uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4 |
| 96 | +with: |
| 97 | +languages: javascript-typescript |
| 98 | +config-file: ./.github/codeql/codeql-channel-runtime-boundary-critical-quality.yml |
| 99 | + |
| 100 | + - name: Analyze |
| 101 | +uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4 |
| 102 | +with: |
| 103 | +category: "/codeql-critical-quality/channel-runtime-boundary" |
| 104 | + |
84 | 105 | plugin-boundary: |
85 | 106 | name: Critical Quality (plugin-boundary) |
86 | 107 | runs-on: blacksmith-8vcpu-ubuntu-2404 |
|
| Original file line number | Diff line number | Diff line change |
|---|
@@ -252,6 +252,8 @@ separate `/codeql-critical-quality/config-boundary` category. The
|
252 | 252 | gateway-runtime-boundary job scans gateway protocol schemas and server method |
253 | 253 | contracts under the separate |
254 | 254 | `/codeql-critical-quality/gateway-runtime-boundary` category. The |
| 255 | +channel-runtime-boundary job scans core channel implementation contracts under |
| 256 | +the separate `/codeql-critical-quality/channel-runtime-boundary` category. The |
255 | 257 | plugin-boundary job scans loader, registry, public-surface, and Plugin SDK |
256 | 258 | entrypoint contracts under a separate `/codeql-critical-quality/plugin-boundary` |
257 | 259 | category. Keep the workflow separate from security so quality findings can be |
|
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。
